All Apps and Add-ons

Discussions

Thread Info

Splunk App & Add-on for ServiceNow: What configuration do I need to properly index "dv_*" fields from ServiceNow?

I have the App for ServiceNow and ServiceNow Add-on working pretty well. Data is coming in. However, the servicenow d...

by Path Finder in

Is it possible to generate Windows EventLog Security with eventgen app?

Hello all, I am looking for the way to generate Windows Event Log Security for testing my alert and dashboard. I h...

by Path Finder in

DB Connect Source

I setup Splunk DB Connect to pull in log files that are stored in a MS SQL database. The logs have a Source column th...

by Explorer in

In handler 'script': Parameter index: No currently active index 'net_f'. It is either not yet loaded, disabled, misconfigured, or not defined.

Hi All, We are getting the below mentioned message while trying to enable or disable the Splunk-Add-on for check poin...

by Motivator in

How can I reduce the amount of data being saved to my index?

Hi guys! I have multiple Palo Alto Network Apps for Splunk devices sending their syslog data to my Splunk instance. I...

by Path Finder in

Is there a way I can ensure the rest of the search does not run when the dbxquery fails in a subsearch?

I've been running into some issues where I'm doing a join on data from a subsearch that uses the dbxquery command for...

by Contributor in

Cisco ACI Add-on for Splunk Enterprise: How to resolve "ACI Error: Did not receive a session key from splunkd." connection error?

Hi. I'm trying to set up the Cisco ACI Add-on for Splunk Enterprise v4.0 on Splunk Enterprise 6.5.1, and am getting c...

by Builder in

How to stream data from Splunk to Kafka?

Hi All, We are trying to stream alert data from systems like Splunk, Nagios etc to Hadoop using Kafka and Spark. ...

by New Member in

Parallel Coordinates Example has been named Location Tracker in latest version

In the latest version of Splunk 6.x Dashboard Examples App, Parallel Coordinate has been incorrectly names as Locatio...

by Legend in

Data not showing up on Search Head - Distributed environment

We have distributed splunk environment. I am using Splunk_TA_windows on universal forwarders to send security event l...

by Explorer in

Splunk Add-on for Microsoft Windows: Which components should I deploy the add-on to?

We have a distributed Splunk environment. We are using a universal forwarder to get logs from a Windows server. Deplo...

by Explorer in

missing \local\inputs.conf file

I used the rest API Modular Input form to create a new input. I can see the input in the Web UI and I can edit. I tho...

by Explorer in

Timeline - Custom Visualization: Can full date time DD/MM/YY HH:MM tooltip options be added?

We have timelines that span 30 days with events we want to see begin/end down to the minute or second on Tool Tips. ...

by Builder in

Splunk AWS data inputs

Hi I am trying to collect data from our AWS VPC. I have setup an EC2 instance on that VPC and the Splunk AWS app ...

by Explorer in

Cisco eStreamer for Splunk: Is there any listing or definitions of what the "rec_type_simple" fields mean?

Is there any listing of the what the "rec_type_simple" fields mean? For example, the events with rec_type_simple=PAYL...

by Communicator in

eStreamer logs flow for a minute and then stop. Client complains of being "out of memory".

Hi, We have recently started facing some issues with the eStreamer client app on our Splunk indexer(CentOS). eStre...

by Builder in

Cisco eStreamer for Splunk: Why is the app status varying between Error ("ERROR: The app has not yet been setup") and Running ("eStreamer client is running")?

The app is running fine however it is cycling between: event_sec=1499353290 status_id=1 status="eStreamer client i...

by Engager in

I was finally able to make Cisco eStreamer work on Windows platforms, but ...

With the help of a Cisco TAC engineer, I was able to make the eStreamer SDK compatible with Windows via a slight modi...

by New Member in

Errors when trying to run eStreamer client "Can't locate Net/SSLeay.pm in @INC

I am having issues getting the eStreamer client to start. I can run ./estreamer_client.pl -t -c /opt/splunk/etc/apps/...

by Path Finder in

Cisco eStreamer for Splunk: How to resolve errors such as "INET6 configuration failederror:140E0197:SSL routines:SSL_shutdown"?

We are running Cisco eStreamer for Splunk version 2.2.2. We are currently seeing an issue with the eStreamer client o...

by Builder in

Get Updates on the Splunk Community!

All Apps and Add-ons

Discussions

Splunk App & Add-on for ServiceNow: What configuration do I need to properly index "dv_*" fields from ServiceNow?

Is it possible to generate Windows EventLog Security with eventgen app?

DB Connect Source

In handler 'script': Parameter index: No currently active index 'net_f'. It is either not yet loaded, disabled, misconfigured, or not defined.

How can I reduce the amount of data being saved to my index?

Is there a way I can ensure the rest of the search does not run when the dbxquery fails in a subsearch?

Cisco ACI Add-on for Splunk Enterprise: How to resolve "ACI Error: Did not receive a session key from splunkd." connection error?

How to stream data from Splunk to Kafka?

Parallel Coordinates Example has been named Location Tracker in latest version

Data not showing up on Search Head - Distributed environment

Splunk Add-on for Microsoft Windows: Which components should I deploy the add-on to?

missing \local\inputs.conf file

Timeline - Custom Visualization: Can full date time DD/MM/YY HH:MM tooltip options be added?

Splunk AWS data inputs

Cisco eStreamer for Splunk: Is there any listing or definitions of what the "rec_type_simple" fields mean?

eStreamer logs flow for a minute and then stop. Client complains of being "out of memory".

Cisco eStreamer for Splunk: Why is the app status varying between Error ("ERROR: The app has not yet been setup") and Running ("eStreamer client is running")?

I was finally able to make Cisco eStreamer work on Windows platforms, but ...

Errors when trying to run eStreamer client "Can't locate Net/SSLeay.pm in @INC

Cisco eStreamer for Splunk: How to resolve errors such as "INET6 configuration failederror:140E0197:SSL routines:SSL_shutdown"?

Observability Highlights | January 2023 Newsletter

Security Highlights | January 2023 Newsletter

Platform Highlights | January 2023 Newsletter

Has anyone experienced this Error rendering Carous...

What is Best Practice for streamed apply of MLTK m...

How can we manage what dashboards a user has acces...

Splunk Add-on for SFDC streaming API- Not getting ...

Does the Website Monitoring App support TLS v1.3?